rootd4ddy

3 exploits Active since May 2023
CVE-2023-34843 NOMISEC HIGH WORKING POC
Traggo Server 0.3.0 - Path Traversal via Crafted GET Request
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request.
7 stars
CVSS 7.5
CVE-2023-43838 NOMISEC HIGH WORKING POC
Personal Management System <1.4.64 - RCE
An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar.
1 stars
CVSS 7.8
CVE-2023-31584 NOMISEC MEDIUM WRITEUP
silicon - Reflected Cross-Site Scripting via User Input Field
GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field.
CVSS 6.1